[HardCodedCredentialsRule] HardCodedCredentialsRule-enable_configuration = false HardCodedCredentialsRule-list_of_known_words_not_considered_in_credentials = pe-puppet,pe-webserver,pe-puppetdb,pe-postgres,pe-console-services,pe-orchestration-services,pe-ace-server,pe-bolt-server HardCodedCredentialsRule-list_of_invalid_values_in_credentials = undefined,unset,www-data,wwwrun,www,no,yes,[],root HardCodedCredentialsRule-regular_expression_of_words_present_in_credentials = (?-mix:user|usr|pass(word|_|$)|pwd|key|secret) HardCodedCredentialsRule-regular_expression_of_words_not_present_in_credentials = (?-mix:gpg|path|type|buff|zone|mode|tag|header|scheme|length|guid) [NoHTTPRule] NoHTTPRule-enable_configuration = false NoHTTPRule-list_of_resources_that_can_use_http = apt::source,::apt::source,wget::fetch,yumrepo,yum::,aptly::mirror,util::system_package,yum::managed_yumrepo NoHTTPRule-list_of_keywords_for_urls = backport,key,download,uri,mirror NoHTTPRule-regular_expression_of_a_normal_http_address = (?-mix:^http:\/\/.+) [AdminByDefaultRule] AdminByDefaultRule-enable_configuration = true AdminByDefaultRule-regular_expression_of_words_present_in_credentials = (?-mix:user|usr|pass(word|_|$)|pwd) [EmptyPasswordRule] EmptyPasswordRule-enable_configuration = true EmptyPasswordRule-list_of_trigger_words = pwd,password,pass EmptyPasswordRule-regular_expression_of_password_name = (?-mix:pass(word|_|$)|pwd) [InvalidIPAddrBindingRule] InvalidIPAddrBindingRule-enable_configuration = true InvalidIPAddrBindingRule-regular_expression_of_an_invalid_ip_address = (?-mix:^((http(s)?:\/\/)?0.0.0.0(:\d{1,5})?)$) [UseWeakCryptoAlgorithmsRule] UseWeakCryptoAlgorithmsRule-enable_configuration = true UseWeakCryptoAlgorithmsRule-regular_expression_of_weak_crypto_algorithms = (?-mix:^(sha1|md5)) [SuspiciousCommentRule] SuspiciousCommentRule-enable_configuration = true SuspiciousCommentRule-list_of_trigger_words = hack,fixme,later,later2,todo,ticket,launchpad,bug,to-do SuspiciousCommentRule-regular_expression_of_keywords_present_in_suspicious_comments = (?-mix:hack|fixme|ticket|bug|secur|debug|defect|weak) [CyrillicHomographAttack] CyrillicHomographAttack-enable_configuration = true CyrillicHomographAttack-regular_expression_of_links_with_cyrillic_characters = (?-mix:^(http(s)?:\/\/)?.*\p{Cyrillic}+)